최신Fortinet NSE 7 - Enterprise Firewall 7.2 - NSE7_EFW-7.2무료샘플문제

A. The access is allowed based on the FortiGuard Category Based Filter configuration

B. The access is blocked based on the Content Filter configuration

C. The access is hocked if the local or the public FortiGuard server does not reply

D. The access is blocked based on the URL Filter configuration

A. FortiGate will add additional redundant information to reconstruct any lost or erratically received packets.

B. When an FGSP member in FortiGate fails, FortiGate flushes the corresponding tunnels and sends out dead peer detection probes to find unavailable remote peers.

C. FortiGate will consider all IKEV2 packets as fragmentable.

D. If fragmentation occurs, FortiGate will allow the packets at the IKE layer.

A. It caches available firmware updates for both managed and unmanaged devices

B. It can be configured as an update server a rating server or both

C. It downloads license information for registered and unregistered devices

D. It functions as rating server only for web filtering and antispam services

A. Only the root FortiGate sends logs to FortiAnalyzer

B. Only FortiGate devices with configuration-sync receive and synchronize global CMDB objects that the toot FortiGate sends

C. Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer

D. FortiGate uses the FortiTelemetry protocol to communicate with FortiAnatyzer.

A. To have both sessions and configuration synchronization in layer 2

B. To have both sessions and configuration synchronization in layer 3

C. To have only configuration synchronization in layer 3

D. To load balance both sessions and configuration synchronization between layer 2 and 3

A.

B.

C.

D.

A. In VRRP, you are restricted to add a third FortiGate into VRRP group 1.

B. You can include 4.4.4.4 and 4.4.4.2 IP addresses using sat vrdst command

C. At the time of failover, FortiGate_A will change its priority to 30

D. By default, preemption mode is enabled

A. You can disable it at the protocol level

B. It works for OSPF and BGP

C. You must configure n globally only

D. It can support neighbor only over the next hop in BGP

A. The NP provides IPS signature matching

B. For TCP traffic FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NP

C. The NP checks the session key or IPSec SA

D. You can disable the NP for each firewall policy using the command np-acceleration st to loose.